Codex, Plugin
Spellbook Skills
Claude Code and Codex skills for daily engineering workflows: worktrees, merge requests, code review, YApi lookup, and Java DDD guidance.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit aca52142e360, unchanged since the check below.
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
hooks/install.py, line 113
os.remove(tmp) - NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
scripts/install-codex-agents.sh, line 110
if [[ "$use_local_source" == "false" ]] && ! command -v curl >/dev/null 2>&1; then - SECRETS_PATH_DOTENV Low
Mentions a .env file.
skills/git-commit/SKILL.md, line 72
暂存时排除敏感文件，例如 `.env`、`*.key`、`credentials*`。不要盲目 `git add -A`。
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
hooks/install.py, line 113
os.remove(tmp)
hooks/install.py, line 167
shutil.rmtree(hooks_dir)
hooks/install.py, line 169
os.remove(manifest_path())
Show more
hooks/install.py, line 322
proc = subprocess.run(
hooks/install.py, line 443
os.remove(path) # 文件由本工具创建且已空 → 删除
.github/workflows/windows-project-context-hook-smoke.yml, line 93
result = subprocess.run(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/install-codex-agents.sh, line 110
if [[ "$use_local_source" == "false" ]] && ! command -v curl >/dev/null 2>&1; then
scripts/install-codex-agents.sh, line 111
echo "curl is required when --source is not provided and no local checkout is available" >&2
scripts/install-codex-agents.sh, line 142
curl -fsSL "${base_url%/}/$file" -o "$tmp"
Show more
scripts/install-project-context-hook.sh, line 113
if ! command -v curl >/dev/null 2>&1; then
scripts/install-project-context-hook.sh, line 114
echo "curl is required when no local checkout is available" >&2
scripts/install-project-context-hook.sh, line 123
curl -fsSL "${base_url%/}/$file" -o "$work_dir/$file"
skills/test-driven-development/references/languages/typescript.md, line 83
http.get('/api/user/:id', () => HttpResponse.json({ id: '1', name: 'Ada' })),
skills/yapi-skill/scripts/common.py, line 289
with urllib.request.urlopen(req, timeout=timeout_seconds, context=context) as resp:
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
skills/git-commit/SKILL.md, line 72
暂存时排除敏感文件，例如 `.env`、`*.key`、`credentials*`。不要盲目 `git add -A`。
skills/git-merge-request/SKILL.md, line 78
- 排除 `.env` 等敏感文件
skills/git-merge-request/SKILL.md, line 85
- 若无已暂存文件，`git add` 已修改 / 新增文件（排除 `.env` / `*.key` / `credentials*` 等敏感文件）
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit aca52142e360. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: aca52142e360269261ae33ca6c17634201da8ada
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.